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(54) SYSTEM FOR SECURE WATERMARKING OF DIGITAL IMAGE SEQUENCE 

(57)Abstract: 

PROBLEM TO BE SOLVED: To provide a digital movie watermarking system for 
providing security over all the aspects of a watermarking process in order to ensure 
an embedded watermark and the integrity of information represented by the 
embedded watermark. 

SOLUTION: A system and method for securely embedding a watermark representing 
message data into movie data consisting of one or more frames of a digital image 
sequence, and displaying one or more frames of the digital image sequence 
containing the embedded watermark, includes providing a secure environment; 
combining the movie data with the watermark within the secure environment to 
produce watermarked movie data; and forming a displayed image from the 
watermarked movie data within the secure environment. 
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CLAIMS 



[Claim(s)] 

[Claim 1] To the movie data which consist of one or more frames of a digital image 
sequence The means for being the system which displays one or more frames of the 
digital image sequence which embeds the watermark showing message data ^safely 
and includes the embedded watermark, and offering a safe environment, In order to 
generate the movie data into which the watermark was put, the means for combining 
with movie data and a watermark within an insurance environment, and within an 
insurance environment It carries out and is [ safe ** of the digital image sequence 
characterized by including the means for forming the displayed image from the movie 
data into which the watermark was able to be put, or ] a system. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] Generally this invention relates to the field of digital image 
processing, and the system for embedding a watermark within an insurance 
environment especially at a digital image sequence. 



[0002] 

[Description of the Prior Art] It is the purpose which proves ownership, pursues the 
origin of data carrying out in digital **, and prevents an unauthorized copy, or 
conveys the additional information (metadata) about the contents, and means 
embedding the message hidden in the image or the image sequence. It is a far- 
reaching product including a digital still camera, a digital video camera, a printer, 
other hard copy output equipments, and contents delivery service Xfor example, 
photograph finishing of the Internet base) to put in a watermark, and it may be used. 
In recent years, there is a remarkable interest in the electronic distribution and the 
display of a theatrical film which are called a digital movie theater. This can be given 
to studio or a distribution contractor by the thing which protects the contents of a 
movie from unauthorized use and for which the source of the contents which proved 
ownership and were stolen there being powerful needs and spacing is followed 
(letting use of the stamp of the hidden date / time amount / location inserted at the 
time of movie distribution and/or a presentation pass). Although it relates to 
especially this invention putting a watermark into an image sequence, it is carried 
out in this way and has usefulness in application like a digital movie theater. 
[0003] The method of putting in many watermark is described in the advanced 
technology containing a patent or technical reference. Many of these approaches 
are carried out in "multimedia ** of Hartung and Kutter, and it is described by "a 
consciousness watermark for a digital image and video" besides technical", 
ProcIEEE, 87(7) pp.1079-1107 (1999). and Wolfgang, Proc.IEEE. and review 
document like 87(7) pp.1 108-1 126 (1999). 

[0004] The radical difference of various approaches is to any a watermark shall be 
applied between a space field or a frequency domain. It carries out in space ******, 
a technique adds a watermark pattern to the pixel value of a direct digital image, it 
carries out in ************ to it, and a technique is added to the transform 
coefficient (for example, discrete cosine conversion (DCT) multiplier used for a 
JPEG and MPEG-compression image) which expresses a digital image for a 
watermark pattern. There are U.S. Pat. No. 6,044,156 published [ else / Honsinger ] 
on March 28, 2000 and U.S. Pat. No. 5,636,292 published to Rhoads on June 3, 1997 
in the example of the space field technique in the advanced technology. There are 
U.S. Pat. No. 5,809,139 published [ else / Girod ] on September 15, 1998, U.S. Pat. 
No. 5,901,178 published [ else / Lee ] on May 4, 1999, and U.S. Pat. No. 5,930.369 
published [ else / Cox ] on July 27, 1999 in the example of the frequency-domain 
technique in the advanced technology. 

[0005] space field approach — be — a frequency-domain approach — be — most 
techniques were spaced and use the pseudo-random noise {PN) sequence (or two 
or more sequences) for extract processing. PN sequence is used as a carrier signal 
generally modulated with message data, and it serves as distributed message data 
(namely, watermark pattern) which cross many pixels or transform coefficients and 
are distributed as a result. This key must be known, when extracting the original 



message data which spaced and were connected with it although a secret key 
(namely, seed value) is generally used in case PN sequence is generated. As an 
environment where a watermark is put in for a digital cinema system, it is desirable 
that the movie embeds a watermark during a plan. Thereby, unique presentation 
information (a theater, a specific screen, a time stump, etc. are shown) can be 
included in the embedded watermark. When a movie is copied unlawfully, the unique 
presentation information (known as a "fingerprint") which shows larcenous time 
amount and a larcenous location can be extracted from the watermark embedded to 
the copy like all the information on the others contained in the watermark. When 
such information is used in legal procedure, it needs to be shown that information 
should fail to be what kind of form. 

[0006] In a typical movie theater, many people may access the contents of a movie, 
and projection equipment. Although this is not employed by the owner of a theater, a 
projectionist, a maintenance staff, and the theater, it also contains the individual in 
whom unauthorized access is possible. Since access to the digital data showing the 
contents of a movie can be copied easily without quality degradation, this is a 
serious problem. In order to prevent this, it is understood well that digital cinema 
data must be protected with powerful encoding technology. To a secret key, 
jalthough based on a public key infrastructure (PKI), it lets the security protocol 
[ like ] known well pass, and such a technique requires decode of the encryption 
data which can be sent at a theater at insurance. Encryption and extensive 
description of a security protocol are an "application code handbook" and CRC. 
Press, Boca Raton, and floor Iine1997 and ISBN 0-8493-8523-7 see. [ / else / 
Menezes ] 
[0007] 

[Problem(s) to be Solved by the Invention] When putting a watermark into digital 
cinema data, the secret key which puts in a watermark offers a certain amount of 
safety required for an extract at least as space. A watermark key can be sent to the 
theater using the same insurance method as being used for a decode key. However, 
it is a digital cinema system and cannot be said to be enough to control only a 
watermark key (or two or more keys). Since many people may be accessible to 
various components of a digital cinema image processing system, it is necessary to 
provide with safety all the potential points about which it will be apprehensive if it 
spaces and the sound condition of a process receives damage. 
[0008] Therefore, in order to secure the integrity of the embedded watermark and 
the information which it expresses in this way, it spaces, safety is offered covering 
all the fields of a process, digital cinema **** is carried out, and the system is 
needed. 
[0009] 

[Means for Solving the Problem] This request is filled by this invention. This 
invention to the movie data which consist of one or more frames of a digital image 
sequence Embed the watermark showing message data safely and include the 



embedded watermark further. The system and approach of displaying one or more 
frames of a digital image sequence are offered, and it offers an insurance 
environment.; in order to create the movie data into which the watermark was put It 
includes forming a display image from the movie data into which the watermark was 
able to be put within combining-within insurance environment-movie data and 
watermark;, and an insurance environment. 

[0010] This invention offers the improved safety, while embedding a watermark by 
the digital image sequence, in order to secure the justification of the information 
included in such a watermark. Moreover, it offers updating safely the important 
parameter into which it is put as a watermark like a key and/or a message, and 
recording these updated parameters on insurance. 
[0011] 

[Embodiment of the Invention] As mentioned above, a secret watermark key (there 
may be plurality) can be protected during delivery using the encoding technology 
known well and a security protocol. However, it may be desirable for the frame of 
the number of specification in a movie sequence to pass, and to change all or a part 
of root key, in order to offer the safety strengthened with the digital cinema system, 
and/or in order to make the visibility of a watermark pattern into min {the cognition 
not changing space and according from a pattern to an appreciation person is 
difficult for changing a pattern). The thing of key generation accompanied by some 
control at least also has the capacity to correct a key, within a local theater 
environment. Such correction of a key must be made by the safe approach, and 
further, probably, it needs to detect use of a key safely, in order to perform a next 
extract. 

[001 2] However, in a digital cinema system, it cannot be said that it is enough only 
by controlling a watermark key. It is also required to protect watermark message 
data. It is because any alterations of message data may become the cause of making 
incorrectness identifying a theater and/or time amount when message data are 
extracted from an illegal copy. Furthermore, it may be desirable to correct message 
data so that renewal of a time amount code may be made after several specification. 
Probably, it will also be required for insurance to detect message use. 
[0013] At the end, after putting in spaces, it is necessary to offer safety for digital 
cinema data. Even if, though already put into the watermark of unique information by 
digital cinema data, a secondary watermark {different information from an original 
watermark is included) may be similarly embedded to them. Since it becomes 
impossible [ solving which watermark is the first watermark ] ("deadlock" problem), 
it will smash the certainty of a watermark of original in any legal procedure. 
[0014] Safety is attained by spacing within an insurance environment and performing 
a process by this invention. An unauthorized individual is a meaningful approach and 
means that the information in which the arbitration of a process was stored or the 
input of arbitration, an output, or internal connection cannot be accessed as an 
insurance environment. This prevents an unauthorized individual's acquiring the 



process which puts in a watermark, and the information about the parameter, and/or 
affecting it. Even if it is the case where data are having the watermark already 
embedded even if, it prevents gaining the digital data showing a movie again. 
[0015] A safe environment is finished through physical and using a logical protection 
technique. An easy physical protection technique is putting all system components 
and the related information of arbitration on the locked room which can be accessed 
only in a suitable key or suitable combination. Similarly, the system component was 
able to be contained in tough physical housing which resists an alteration by the tit 
is (like the case of hardened steel with the locked lid)) mechanical property. 
[0016] When there is an alteration, housing can cut a power source and can contain 
the lid switch which eliminates a still more important logged point, and other safety 
devices again. The further physical safety can be offered using the circuit designed 
so that it might especially become impossible operating it, no matter the hi- 
technology approach like a semiconductor chip and alteration [ what ] may take 
place. Some arguments on these hi-technology security treatment are "a tamper 
resistance-admonition comment" and The. Second USENIX Workshop on Electronic 
Commerce Proceedings, Oakland, CA, Nov.1996, pp.1-11, and ISBN 1-880446-83-9 
see. [ / else / Anderson ] However, in a digital cinema system, from one physical 
location, seemingly the information on some needs to be transmitted to somewhere 
else, and must give suitable protection to this information by the logical approach. 
For example, the digital data showing a movie must be transmitted from a 
distribution site to each theater. And as mentioned above, this data can be 
protected using the powerful encryption approach and a security protocol. 
[001 7] safe — digital cinema **** is carried out and the fundamental configuration 
of a system is shown in drawing 1 . The remote data server 10 {for example, 
distribution site) is compressed, and delivers the enciphered movie data to a theater. 
Although a movie is compressed within the limits of constraint of a current 
technique in order to realize a more effective transfer of data, compression is not 
essential to an operation of this invention. Compressed data is enciphered in order 
to prevent an unauthorized individual accessing digital cinema data between the 
deliveries to a theater. The remote decode key server 12 delivers a safe decode key 
(or two or more keys) to a theater, in order to decode the enciphered movie data. In 
some system, the remote data server 10 and the remote decode key server 12 may 
be contained in the single server. In the alien system, the remote data server was 
able to be replaced with another means, in order to deliver movie data to physical 
storing media like a theater, for example, a DVD disk. 

[0018] It is compressed at a theater and the data and the decode key which were 
enciphered are sent to the decode unit 1 4. In order to generate the compression 
movie data which are not enciphered using a decode key, a decode unit is 
compressed and decodes the enciphered data. The compressed movie data are sent 
to the decompression unit 1 6 in order to generate incompressible movie data from it. 
Incompressible movie data express the sequence of one or more frames of digital 



data. Each frame is shown as a frame n (n= 1 f 2, .... N). N is the total of the frame of 
a movie sequence here. 

[0019] In order to generate movie data including a watermark, the incompressible 
digital data for each frame spaces digital cinema data, they are combined with a 
pattern, and it spaces them, and is sent to a unit 18. A watermark pattern can be 
generated using the approach with which many differ, and can a|so change a 
watermark pattern after the frame of the number of specification so that it may be 
stated immediately henceforth. Although it may be necessary to put a watermark 
into each frame, generally the frame of a considerable number will contain a 
watermark pattern at least. 

[0020] The movie data into which the watermark was able to be put are sent to the 
image formation assembly 20 which changes digital data into the visible image by the 
audience of a theater which can be appreciated from it. A result is the projection 
frame n including the watermark embedded within the limits of the displayed 
contents of a movie. When a pirate edition video contractor makes the unauthorized 
copy of the projected movie, a watermark can be behind extracted, in order to be 
conveyed with a copy and to show information about the movie like the location of 
an illegal copy, and time amount. 

[0021] In the desirable example of this invention, it is contained the decode unit 14, 
the decompression unit 1 6, and in the insurance environment of the theater where a 
unit 1 8 and the image formation assembly 20 are altogether shown in drawing 1 by 
spacing. It means that this means that an unauthorized individual cannot access 
decode data, decompression-device rest data, or the data into which the watermark 
was put, and still such a person can space it, and it -can affect the information about 
a process, or cannot be obtained. The single Physical Unit generally called a 
"projector" can be provided with a safe environment by unifying all these processing 
units. The projector contains sufficient physical insurance policy for preventing the 
internal configuration element of arbitration, or unauthorized access to a connection. 
These policies can include the invasion-detecting circuit which makes a component 
actuation impossible, when it acts as the monitor of anti^Ot is -(like case of locked 
steel)) alteration housing, and/or the integrity of an overall system and unauthorized 
access is made. In order to space and to protect a decode process, an invasion- 
detecting circuit may delete various logged points like a key register and a message 
register again, when integrity of a system is made dangerous. 
[0022] the desirable example described now — decode and decompression — it 
spaces, and all image formation processes are put together and made into the single 
insurance unit. However, probably, it will also be useful to divide these processes' 
into two or more Physical Units connected by safe logical connection. As shown in 
drawing 2 , the decode unit 14 and the decompression unit 16 are held in one safe 
Physical Unit, and, on the other hand, are spaced, and a unit 18 and the image 
formation assembly 20 may be held in other safe Physical Units. These two 
insurance units are connected using a safe local communication link, and the safety 



is offered by powerful encryption / decompression protocol, for example. The safe 
Physical Unit which spaces and includes a unit 18 and the image formation assembly 
20 constitutes a projector from this system. Moreover, it is also possible to finish 
setting up other configurations of the safe Physical Unit accompanied by a safe local 
communication link, and it includes spacing through the separated Physical Unit 
accompanied by the safe local communication link to the image formation assembly 
20 from the decompression unit 16, and arranging equipment 18. 
[0023] It is combined with the incompressible movie data for the frame n through 
which it spaced and to which the watermark was given in the system with safe 
drawing 1 . As mentioned above, this watermark combination process -can be made in 
a space field or a frequency domain. However, in other examples of this invention, a 
watermark combination process is applied to the compressed data for Frame n. 
Compression technology like MPEG and JPEG essentially includes frequency 
disassembly of original image data, therefore they can offer the convenient 
framework for performing frequency-domain watermark ON **. drawing 3 is spaced 
through compressed data and ON ** is performed — safe — it spaces and a system 
is shown. In this system, it is compressed, and the enciphered movie data are sent 
to the decode unit 14 from the remote data server 10, and the remote decode key 
server 12 offers a decode key safe for a decode unit. The decode unit 14 generates 
compression movie data, in order that compression movie data may generate 
compressed data including a watermark after that, it is spaced, is spaced in a unit 18 
and combined with a pattern. The data into which it was compressed into and the 
watermark was able to be put are sent to the decompression unit 16 from it, and 
generate the movie data into which the watermark was able to be put there, i.e., 
incompressible movie data including a watermark. The movie data into which the 
watermark was able to be put are sent to the image formation assembly 20 which 
changes digital data into the visible image which an audience can appreciate at a 
theater. In this system, they may be decode, decompression, and a Physical Unit 
with plurality safe [ to which it spaced through, and the image generation process 
was again included in the insurance environment, and it was connected by the single 
safe Physical Unit or the safe communication link ]. 

[0024] It spaces, and is compressed in a system and the enciphered data with safe 
drawing 13 are directly sent to the decode unit 14 from the remote data server 10. 
This means real-time transmission of movie data. It is desirable for it to be 
compressed for next playback and to have the local theater server which stores the 
enciphered data in many systems. Then [ delivery and ], in drawing 4 , this 
configuration is shown, the remote data server 10 is compressed and data are 
stored in the local theater server 22 in preparation for next use in the enciphered 
data here. While compression is not indispensable for this invention, it is used by 
many systems by the request for delivery of efficient storing and movie data. 
However, encryption is a component required in order to protect data from 
unauthorized access, and when it is saved at a local theater server, it may be unable 



to be called completely safe environment. When a movie is shown, the local theater 
server 22 is sent to the decode unit 1 4 which uses a decode key, in order to 
generate the movie data which were compressed and were compressed in the 
enciphered data. As stated for the system of drawing 1 , a deconstructivism press is 
carried out by the decompression unit 1 6, compressed data spaces, in order to 
space further and to generate entering movie data, and a watermark pattern is 
combined with the movie data by which the deconstructivism press was carried out 
using equipment 1 8. The movie data into which the watermark was able to be put 
are sent to the image formation assembly 20 which makes the visible image which 
had the watermark embedded after that, again — decode and decompression — it 
spaces and the image formation unit is contained in the insurance environment. 
[0025] Probably, it will also be useful to move a local theater server into an 
insurance environment. As shown in drawing 5 , this configuration is compressed, the 
enciphered movie data are made to decode by the decode unit 14, and the 
compression movie data produced as a result are stored in the local theater server 
22 from it. Since the local theater server 22 is contained in the insurance 
environment, access to the data by the unauthorized individual is prevented, and 
compressed data can be stored in the format of not enciphering. When a movie is 
announced, delivery and the incompressible movie data obtained as a result space 
through the decompression unit 16 from it the movie data with which the local 
theater server was compressed, a watermark can be put in by the unit 18, and it is 
displayed using the image formation assembly 20. Moreover, arrangement of a local 
theater server can be attained after the decode unit 14 and the decompression unit 
1 6. In that case, the local theater server 22 stores the decoded incompressible 
movie data in an insurance environment. About a memory requirement, while this 
system is inefficient, it simplifies the executive operation to movie data at the 
presentation time. It is far easier to carry out it at once for every movie show, 
rather than it repeats decode and decompression. 

[0026] It is shown in drawing 1 5 described now, and spaces, and a watermark pattern 
is spaced and it enables it to use a unit 18 in a system. This pattern can include the 
information which spaces, can preset to a unit, spaces and expresses unique ID of a 
unit and/or a projector at the time of manufacture. However, it was restricted very 
much and, as for this approach, correcting a watermark pattern repeatedly the sakes 
[ following ] makes min the visibility of; which updates;2 watermark information that 
the additional safety to desirable :1 watermark information is offered (for example, 
since time stamp information is reflected), and the watermark pattern to 3 theater 
audience. In other desirable examples of this invention, a watermark pattern is 
corrected by changing a watermark key and/or a watermark message at various 
points of the sequence of a movie frame. As shown in drawing 6 , the watermark 
pattern of presetting is exchanged by the watermark pattern generation equipment 
24 which spaces from watermark key generation equipment 26, spaces a key from 
watermark message generation equipment 28, and receives a message, watermark 



pattern generation equipment 24, key generation equipment 26, and message 
generation equipment 28 — and it spaces and a unit 18 is altogether contained in an 
insurance environment. As mentioned above, it was possible for you to have been 
made to exist by two or more Physical Units which equipped these safe 
communication link to which it spaces, and the insurance environment for a 
component can be constituted in a single Physical Unit (this may contain alien- 
system components, such as the image formation assembly 20), or it spaces through, 
and a component conveys data between Physical Units. For example, it can include 
in the Physical Unit into which watermark pattern generation equipment 24, key 
generation equipment 26, and message generation equipment 28 could be included in 
one Physical Unit (it may be in a theater or you may be in a remote site), and 
equipment 1 8 was divided by spacing. 

[0027] A watermark key and/or a watermark message are correctable throughout 
the sequence of a movie frame using the system shown in drawing 6 , if there is a 
demand. For example, in the case of m>=1, a watermark key can also change a key 
by the random approach within the limits of watermark key generation equipment 26 
that it can change every m frames. Since the key must become clear in order to 
extract a watermark, it will be useful to use only the key from which the limited 
number differs. It is easy to perform a thorough search of a different key between 
next watermark extract processes using a limited number of keys. By changing a 
watermark key, the knowledge of the key used for one frame stops offering no 
knowledge about the key used for other frames, will space, and will provide a 
process with the further safety. In addition, use of most keys which space and are 
different with a technique brings about a completely different watermark pattern. 
This prevents that an individual has a watermark pattern specified by what {for a 
changeless watermark pattern to be reinforced while spoiling the contents of an 
image with a motion) a multiple frame is averaged for. Furthermore, the watermark 
pattern which changes through time amount will not be more unpleasant than/which 
is harder to be found for the appreciation person of the audience of a theater. 
[0028] Similarly, a watermark message can be changed for every frames of each 
movie sequence, or a fixed number of frames of a sequence within the limits. Like 
time amount or a day entry, especially a watermark message can correct unique ID 
of a theater specification screen etc. so that specific presentation information may 
be included. Furthermore, a hour entry can be updated through the sequence of a 
movie frame, consequently when it is m>=1, a new time stamp can be contained in 
watermark information every m frames. In order to offer sufficient justification for a 
time amount stamp, watermark message generation equipment 28 can contain a 
perfect time recorder within an insurance environment. An unauthorized individual 
cannot correct a time recorder in a movie data-processing path, without making one 
or more required components into use impossible. 

[0029] Watermark pattern generation equipment 24 needs to turn cautions to the 
point which needs to generate a new watermark pattern, only when a watermark key 



or a watermark message changes. When watermark pattern generation equipment 
can act as the monitor of the key offered with watermark key generation equipment 
26 and watermark message generation equipment 28, and the message, respectively 
and a key or a message is corrected, a new watermark pattern is generated. 
Moreover, it is possible to use the watermark pattern of the number of limitation 
which calculated beforehand and was stored in memory within the limits of 
watermark pattern generation equipment 24. In this case, a watermark key and a 
message commit the address in a look-up table, and a corresponding watermark 
pattern is taken out from memory. 

[0030] In other desirable examples of this invention, the watermark key generated 
with watermark key generation equipment 26 and the watermark message generated 
with watermark message generation equipment 28 are transmitted to insurance at 
the remote watermark database 30. As shown in drawing 7 , since the watermark key 
generated with watermark key generation equipment 26 is stored and use of the 
watermark information extract from the unauthorized copy of movie data is 
presented with it later, it is sent to the remote watermark database 30 via a safe 
communication link. The safe communication link was able to be offered using the 
encryption approach and protocol which were known well. In a watermark database, 
each watermark key may relate to a specific frame or two or more frames from a 
given movie and specific specific theater/screen, and/or a show. However, it may be 
enough as it just to record the key used again for specific theater / screen without 
relation with a specific frame or two or more frames, and the movie show or two or 
more keys. Similarly, with a safe means, the watermark message generated with 
watermark message generation equipment 28 is sent to the remote watermark 
database 30, and can be connected with a specific frame or a series of frames 
and/or specific specific theater/screen, and a show there. If a watermark key and a 
message are stored in an encryption format in the remote watermark database 30 or 
the database itself is contained in an insurance environment, it can save in the 
decoded format. 

[0031] In another example with desirable this invention, all or a part of watermark 
key and/or watermark message are offered by the remote watermark server. As 
shown in drawing 8 , the remote watermark server 32 sends a watermark root key to 
the watermark key generation equipment 26 which exists in an insurance 
environment at insurance. When a root key is only a partial key, watermark key 
generation equipment 26 adds a suffix and/or a prefix to a root key, in order to make 
a perfect key. Or a remote server is able to send the perfect key which spaces 
without being corrected after that and sent to pattern generation equipment. It -can 
use as an initialization key which also spaces a perfect key behind and by which it is 
corrected with key generation equipment 26. The remote watermark server 32 can 
send many root keys again, and each root key in this case is connected with the 
sequence of the specific frame in a movie, or a multiple frame. 
[0032] Similarly, the remote watermark server 32 is spaced through insurance, and 



sends a root message to the watermark message generation equipment 28 which 
exists in an insurance environment. A root message can include the unique 
presentation ID for the show of the specification of a movie, including a specific 
theater and unique ID of a screen. Watermark message generation equipment 28 was 
able to add the time stamp to unique ID after that. Here, in case a time stamp shows 
a movie, it is updated at various points. As for a root message, it is possible for it to 
be a perfect message (or a series of messages) including a theater and a hour entry 
again. 

[0033] The safety of a watermark root key and a root message is offered during a 
transfer by the encryption approach and protocol which were known well. 
Furthermore, before they are delivered at a theater, in order for a remote watermark 
server to prevent an unauthorized individual altering a root key or a message, it is 
protected in the insurance environment. The remote watermark server is also 
maintaining the safe database to which a watermark root key and a root message 
are related with a specific movie frame or a series of frames and/or specific specific 
theater/screen, and a show. 



DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing 1] In a digital cinema system, it is drawing showing the system for 
embedding a watermark to movie data within an insurance environment. 
[Drawing 2] In a digital cinema system, it is drawing showing another system for 
embedding a watermark to movie data within an insurance environment. 
[Drawing 3] In a digital cinema system, it is drawing showing the system for 
embedding a watermark to the movie data compressed within the insurance 
environment. 

[Drawing 4] In the digital cinema system accompanied by the local storage of the 
enciphered data and the compressed data, it is drawing showing the system for 
embedding a watermark within an insurance environment. 

[Drawing 5] In the digital cinema system accompanied by the local storage of the 
enciphered data and the compressed data, it is drawing showing the system for 
embedding a watermark within an insurance environment. 

[Drawing 6] It is drawing showing the system for embedding a watermark within an 
insurance environment in the spacing and using key and watermark message digital 
cinema system generated locally. 

[Drawing 7] It is drawing showing the system for embedding a watermark within an 
insurance environment in the digital cinema system accompanied by [ space and ] 
the remote database storage of a key and a watermark message generated locally. 



[Drawing 8] In the digital cinema system using the safe watermark root key and 
watermark root message which are generated by the remote watermark server, it is 
drawing showing the system for embedding a watermark within an insurance 
environment. 

[Description of Notations] 

10 A remote data server, 12 A remote decode key server, 14 decode unit, 16 A 
decompression unit, 18 It spaces and is a unit and 20. An image formation assembly, 
22 A local theater server, 24 It spaces and is pattern generation equipment and 26. 
It spaces and is key generation equipment and 28. It spaces and is message 
generation equipment and 30. A remote watermark database, 32 Remote watermark 
server. 
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